AMENDMENTS TO THE CLAIMS 



1-15. (Canceled) 

16. (Currently Amended) A data processing device for playing back a digital work recorded 
on a recording medium having also recorded thereon (i) a plurality of record digest values 
generated from a plurality of data blocks constituting the digital work and (ii) record signature 
data generated by applying, with use of a signature key, a signature generating algorithm to a 
first combination made of some or all of the plurality of record digest values, the data processing 
device comprising : 

a verification key storing unit storing configured to store a verification key corresponding 
to the signature key; 

a using unit op e rabl econfigured to play back the digital work; 

a selecting unit oporablo configured to . each time the digital work is played back. 
randomly select a predetermined number of data blocks from all of the plurality of data blocks, 
the predetermined number being smaller than the number of all the plurality of data blocks; 

a calculating unit operabl e configured to calculate a plurality of calculation digest values 
from the selected data blocks; 

a reading unit op e rabl e configured to read remaining record digest values corresponding 
to unselected data blocks from among the plurality of record digest values; 

a generating unit op e rabl econfigured to generate a second combination based on 
calculation digest values and the remaining record digest values, the second combination being 
the same as data which is generated from the first combination by replacing record digest values 
corresponding to the selected data blocks with corresponding calculation digest values; 

a signature verifying unit op e rabl e configured to p e rform a signatur e v e rification verify 
the record signature data b y applying, with use of the verification key, a signature verification 
algorithm to the second combination and the record signature data; and 

a use controlling unit oporablo configured to stop ^ said u sing unit from playing back 
the digital work when the signatur e v erification is unsuccessfiil. 
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17. (Currently Amended) The data processing device of Claim 16, wherein 

the plurality of record digest values include a plurality of primary record digest values, 
each of which is generated for one of the plurality of data blocks, and a plurality of secondary 
record digest values generated from two or more of the plurality of primary record digest values, 
and the record signature data is generated by applying, with use of the signature key, the 
signature generating algorithm to the first combination made of some or all of the plurality of 
secondary record digest values, 

tbe -said r eading unit reads, from the recording medium, the plurality of secondary record 
digest values and the remaining record digest values from among the plurality of primary record 
digest values, and 

fee -said g enerating unit includes: 

a calculating subunit op e rabl econfigured to calculate one or more secondary calculation 
digest values based on the calculation digest values and the remaining record digest values; and 

a combining subunit operable configured to generate the second combination based on the 
plurality of secondary record digest values and the one or more secondary calculation digest 
values, the second combination being the same as data which is generated from the first 
combination by replacing record digest values corresponding to the selected data blocks with 
corresponding calculation digest values. 

18. (Currently Amended) The data processing device of Claim 17, wherein 

the digital work includes a plurality of files, each of which corresponds to one of the 
plurality of secondary record digest values and is constituted by two or more of the plurality of 
data blocks, 

each of the plurality of secondary record digest values is generated by using primary 
record digest values corresponding one-to-one with the two or more of the plurality of data 
blocks constituting a file corresponding to the secondary record digest value, 

the -said calculating subunit calculates a secondary calculation digest value, with respect 

to each file including at least one of the selected data blocks, by using primary record digest 

values corresponding to the unselected data blocks included in the file and the calculation digest 
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value corresponding to the at least one of the selected data blocks, 

fee -said reading unit reads, with respect to each file including none of the selected data 
blocks, a secondary record digest value corresponding to the file, and 

the -said combining subunit generates the second combination by combining the 
calculated secondary calculation digest values and the read secondary record digest values. 

1 9. (Currently Amended) The data processing device of Claim 1 8, wherein 

the plurality of record digest values are hash values each generated by a hash fimction, 
tbe -said calculating unit applies the hash function to each of the selected data blocks in 

order to calculate hash values which are the calculation digest values, and 

fee -said calculating subunit applies the hash fimction to the primary record digest values 

corresponding to the unselected data blocks and the calculation digest values in order to 

calculate hash values which are the secondary calculation digest values. 

20. (Currently Amended) The data processing device of Claim 1 8, comprising, instead of fe«- 
said u se controlling unit: 

a warning display unit oporablo configured to display, when the digital work is judged as 
not being valid, a notice of invalidity of the digital work. 

2 1 . (Currently Amended) The data processing device of Claim 1 6 wherein the recording 

medium has additionally recorded (i) area information indicating an access permitted area, on the 
recording medium, that an external device is permitted to access and (ii) signature data generated 
by applying, with use of a signature key, the signature generating algorithm to part or all of the 
digital work and the area information, the data processing device further comprising: 

an access prohibiting unit op e rabl e configured to prohibit access to areas other than the 
access permitted area based on the area information; 

a second verifying unit operable configured to perform a signature verification by 
applying, with use of a verification key, a signature verification algorithm to the digital work, the 
area information, and the signature data; and 
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a second use controlling unit operable configured to stop fee -said u sing unit from playing 
back the digital work when the signature verification is unsuccessfiil. 



22. (Currently Amended) The data processing device of Claim 16, wherein 

tbe -said selecting unit, fee -said calculating unit, fee -said r eading unit and fee -said 
signature verifying unit are assembled together in a single large scale integration. 

23. (Currently Amended) The data processing device of Claim 16, wherein 

fee said reading unit reads record digest values corresponding to the selected data blocks 
from the recording medium, and 

the data processing device ftirther comprising: 

a digest value verifying unit op e rabl e configured to make a judgment whether the 
plurality of record digest values recorded on the recording medium match calculation digest 
values; and 

a third use controlling unit oporablc configured to stop fee said using unit from playing 
back the digital work when the judgment is affirmative. 

24. (Previously Presented) A recording medium used with the data processing device of 
Claim 16, 

(i) having recorded thereon: 

a digital work; 

a plurality of record digest values generated from a plurality of data blocks constituting 
the digital work; and 

record signature data generated based on the plurality of record digest values, and 

(ii) supplying to the data processing device the digital work, the plurality of record digest 
values, and the record signature data. 

25. (Currently Amended) A data processing method (i)-applied to a data processing device 

including: including a verification key storage unit storing a verification key corresponding to a 
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signature key; a using unit; a selecting unit; a calculating unit; a reading unit; a generating unit; a 
signature verifying unit; and a user control unit, and reading a digital work from a recording 
mediu m, the recording medium having recorded thereon: t hereon t he digital work; a plurality of 
record digest values generated from a plurality of data blocks constituting the digital work; 
record signature data generated by applying, with use of a signature key, a signature generating 
algorithm to a first combination made of some or all of the plurality of record digest values, the 
data processing method comprising: 

a using step of causing the using unit to play back the digital work; 

a selecting step of causing the selecting unit to , each time the digital work is played back, 
randomly select a predetermined number of data blocks from all of t he plurality of data blocks, 
the predetermined number being smaller than the number of all of the plurality of data b locks; 

a calculating step of causing the calculating unit to calculate a plurality of calculation 
digest values from the selected data blocks; 

a reading step of causing the reading unit to read remaining record digest values 
corresponding to unselected data blocks from among the plurality of record digest values; 

a generating step of causing the generating unit to generate a second combination based 
on calculation digest values and the remaining record digest values, the second combination 
being the same as data which is generated from the first combination by replacing record digest 
values corresponding to the selected data blocks with corresponding calculation digest values; 

a signature verifying step of causing the signature verifying unit to perform a signature 
verification verify the record signature data by applying, with use of the verification key, a 
signature verification algorithm to the second combination and the record signature data; and 

a use confroUing step of causing the use confroUing unit to stop the using unit from 
playing back the digital work when the signature v erification is unsuccessful. 

26. (Currently Amended) A data processing program (i)-applied to a data processing device 
including including: a verification key storage unit storing a verification key corresponding to a 
signature key; a using unit; a selecting unit; a calculating unit; a reading unit; a generating unit; a 
signature verifying unit; and a user control unit, and reading a digital work from a recording 
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mediu m, the recording medium having recorded thereon: t hereon t he digital work; a plurality of 
record digest values generated from a plurality of data blocks constituting the digital work; 
record signature data generated by applying, with use of a signature key, a signature generating 
algorithm to a first combination made of some or all of the plurality of record digest values, the 
data processing program being recorded on another recording medium and causing the data 
processing device to execute: 

a using step of causing the using unit to play back the digital work; 

a selecting step of causing the selecting unit to . each time the digital work is played back. 
randomly select a predetermined number of data blocks from all of t he plurality of data blocks, 
the predetermined number being smaller than the number of all of the plurality of data b locks; 
a calculating step of causing the calculating unit to calculate a plurality of calculation digest 
values from the selected data blocks; 

a reading step of causing the reading unit to read remaining record digest values 
corresponding to unsclccted data blocks from among the plurality of record digest values; 

a generating step of causing the generating unit to generate a second combination based 
on calculation digest values and the remaining record digest values, the second combination 
being the same as data which is generated from the first combination by replacing record digest 
values corresponding to the selected data blocks with corresponding calculation digest values; 

a signature verifying step of causing the signature verifying unit to p e rform a signatur e 
verification v erify the record signature data b y applying, with use of the verification key, a 
signature verification algorithm to the second combination and the record signature data; and 

a use controlling step of causing the use controlling unit to stop the using unit from 
playing back the digital work when the signatur e v erification is unsuccessful. 

27. (Canceled) 
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